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Entanglement distillation is a process via which the strength and purity of quantum entanglement 
can be increased probabilistically. It is a key step in many quantum communication and computation 
protocols. In particular, entanglement distillation is a necessary component of the quantum repeater, 
a device which counters the degradation of entanglement that inevitably occurs due to losses in 
a communication line. Here we report an experiment on distilling the Einstein-Podolsky-Rosen 
(EPR) state of light, the workhorse of continuous-variable entanglement, using the technique of 
noiseless amplification. In contrast to previous implementations, the entanglement enhancement 
factor achievable by our technique is not fundamentally limited and permits recovering an EPR 
state with a macroscopic level of entanglement no matter how low the initial entanglement or how 
high the loss may be. In particular, we recover the original level of entanglement after one of the 
EPR modes has passed through a channel with a loss factor of 20. The level of entanglement in our 
distilled state is higher than that achievable by direct transmission of any state through a similar loss 
channel. This is a key bench-marking step towards the realization of a practical continuous-variable 
quantum repeater and other CV quantum protocols. 


I. INTRODUCTION. 

Quantum technology protocols exploit the unique 
properties of quantum systems to achieve communica¬ 
tion, computing and metrology tasks that are impossible, 
inefficient or intractable for classical systems [1]. In many 
cases the distribution of entanglement, correlations be¬ 
tween subsystems that exceed those possible for classical 
systems, is a necessary condition for quantum technol¬ 
ogy protocols to succeed. However, entanglement is frag¬ 
ile and can easily be degraded by the communication or 
storage of the entangled quantum systems. One solution 
to this problem is entanglement distillation Q. Given 
an ensemble of weakly entangled quantum states, distil¬ 
lation techniques allow one to select or distill a smaller 
sub-ensemble of quantum states that are more strongly 
entangled. This can be achieved using only local opera¬ 
tions and classical communication. In this way strong en¬ 
tanglement can be established between remote locations 
under conditions where it would be impossible without 
distillation — such as losses that are common in quantum 
communication channels. 

There are two broad classes of quantum optical tech¬ 
nology protocols: those using quantum observables with 
a discrete spectrum, such as the spin of an electron, and 
those using quantum variables with a continuous spec¬ 
trum, such as the position and momentum of a harmonic 
oscillator [3]. Our focus here is distillation of continuous- 
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variable (CV) states. The primary entangled resource 
in CV systems is the two-mode squeezed vacuum state, 
also known as the Einstein-Podolsky-Rosen state Q be¬ 
cause its idealized version was introduced by EPR in the 
early days of quantum mechanics to illustrate quantum 
nonlocality. 

The EPR state can be used to implement many quan¬ 
tum protocols including continuous versions of teleporta¬ 
tion and quantum key distribution [E[. An advantage of 
the CV approach to quantum communication is its uni¬ 
versality: it is capable of transmitting arbitrary states 
of light, in contrast to the single-photon subspace of 
the Hilbert space to which the discrete method is lim¬ 
ited. Further, homodyne detection used in CV systems 
does not require expensive single-photon detectors and is 
more tolerant to ambient light. Additionally, in contrast 
to their discrete-variable counterparts, high-quality EPR 
states are readily available on demand at a high rate from 
parametric amplifiers. 

On the other hand, those communication protocols 
that use single photons do not need a special distilla¬ 
tion procedure to counter the effect of the losses. This 
is because if a photon is lost, it is not registered by the 
detector, so a loss event is automatically eliminated from 
further analysis. In CV protocols, quadrature detection 
occurs independently of the losses, so recovering an en¬ 
tangled resource suitable for use in a teleportation or 
repeater protocol requires a dedicated distillation step. 

In this paper we present experimental results demon¬ 
strating the distillation of optical CV entanglement in 
two settings: for very low initial squeezing and after 
transmission through a lossy channel. In the second set¬ 
ting, we directly observe an entanglement strength of 
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our distilled state that exceeds anything possible via de¬ 
terministic transmission of the states through the same 
channel. That is, even if a perfectly pure, infinitely en¬ 
tangled EPR state was passed through that channel, the 
resulting entanglement would be inferior to what we ob¬ 
serve for our distilled state. We will refer to this as break¬ 
ing the deterministic bound. 

Our protocol relies on the technique of noiseless lin¬ 
ear amplification (NLA) [ 6 ], in contrast to previous CV 
entanglement distillation demonstrations based on pho¬ 
ton subtraction [7, H]. Photon subtraction is unable to 
enhance entanglement in the EPR state by more than a 
factor of two, which is by far not sufficient to compen¬ 
sate for a loss occurring in a typical communication line. 
NLA does not suffer from this limitation, and in princi¬ 
ple allows restoring the entanglement to a macroscopic 
level after an arbitrarily high loss @. It is this feature of 
NLA that enables us to break the deterministic bound. 
It represents a major step forward in realizing protocols 
that can enhance quantum technologies under practical 
conditions. 

A key feature of our experiment is that heralded, free 
propagating distilled EPR states are produced by our 
protocol. This is in contrast to experiment H3 , where 
NLA has been emulated by postselecting the quadra¬ 
ture measurements of an asymmetrically attenuated EPR 
state. This virtual distillation protocol cannot herald 
free-propagating EPR pairs and hence cannot be used 
for quantum teleportation or repeaters. 

II. THEORY. 

The principal scheme of our setup is shown in the inset 
to Fig. [TJ We explain the idea of our method in the 
practically relevant case of low initial squeezing and high 
losses. The initial EPR state prepared in a pair of modes 
A and B is then given by 

\^ab) = | 00 ) - 7 | 11 ), ( 1 ) 

where we have limited the analysis to the first order of 
the squeezing amplitude 7 « 1. A loss channel with 
amplitude transmissivity r « 1 applied to mode B will 
degrade the non-vacuum component of this state, trans¬ 
forming it into a mixture 

p = (|00) - 7 T |11»«00| - 7 r (111) + 7 2 (1 - r 2 ) |10)(10|. 

( 2 ) 

We then subject this state to NLA. In contrast to pre¬ 
vious NLA experiments HH 1 , where either the method 
of generalized quantum scissors mim or coherent su¬ 
perposition of photon subtraction and addition was used, 
here we employ a technique known as quantum cataly¬ 
sis 0 - The mode to be amplified is reflected from a 
low-reflectivity beam splitter, on which it is brought into 
interference with an ancillary single photon. The ampli¬ 
fication event is heralded by detecting a single photon 
in the other output port of that beam splitter (Fig. [lj 


inset). This will happen if either (a) the ancilla photon 
is reflected (probability amplitude of this event equals 
the amplitude reflectivity r < 1 of the beam splitter) or 
(b) a photon from the EPR state is transmitted (this oc¬ 
curs with probability amplitude yr). In the latter case, 
the ancilla photon is likely to transmit through the beam 
splitter into the reflected channel of the EPR state. If 
these possibilities are made indistinguishable by proper 
mode matching of the ancilla photon and the EPR state, 
their amplitudes add coherently. As a result, the EPR 
state is transformed into 

p' = (r |00) — yr |ll))(r (001 — yr (111) 

+ r 2 7 2 (l_ r 2 )|10 )(i0 |. 

The second term in the above state is of the higher order 
in y, r, and r than the second term, so the final state is 
well approximated by pure superposition 

\^'ab) = r | 00 ) — 7 r | H ) • ( 3 ) 

We see that the reduction of the single-photon component 
due to low initial squeezing and/or loss in the commu¬ 
nication is compensated by the reduction of the vacuum 
part due to the catalysis. This is equivalent to NLA with 
an amplitude gain of g = 1/r. 

The amount of entanglement to be recovered depends 
on the ratio r/yr and reaches one ebit at g = (yr) -1 . If 
we instead aim to optimize the two-mode squeezing of the 
resulting state, this goal is reached at a slightly lower gain 
of g = [yr(l + v^)] -1 resulting in a two-mode squeezing 
factor of 2 —v^2 ^0.59 with respect to the standard quan¬ 
tum limit. The precise value of the optimal gain may vary 
dependent on the efficiency of the ancilla photon source 
as well as the chosen continuous-variable entanglement 
measure. The bottom line is, though, that however high 
the loss, and however low the initial squeezing may be, 
one can choose the NLA gain to recover a macroscopic 
amount of entanglement in the distilled state 0 ]- 


III. EXPERIMENT. 

The EPR state (Fig. |Tj) is prepared in a periodically 
poled potassium titanyl phosphate crystal (PPKTPi), 
where the type II parametric down-conversion is taking 
place. The crystal is pumped with frequency-doubled 
pulses at 390 nm, generated by a Ti:Sapphire laser with 
a repetition rate of 76 MHz and a pulse width of ^ 1.8 ps. 
We spatially split the outgoing orthogonally-polarized 
light modes on a polarizing beam splitter. Each mode 
is subjected to balanced homodyne detection 0- The 
phase of one of the local oscillator phases is varied by a 
piezoelectric transducer (PZT). This allows us to obtain 
a quorum of the two-mode quadrature measurements and 
therefore completely characterize the state. We observe 
the variances in the difference and sum of the position 
quadratures of the initial state to be (( Xa — Xb) 2 ) = 
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FIG. 1: Experimental setup. Inset: principal scheme. The 
NLA distillation event corresponds to the click in the single¬ 
photon detector placed in the beam splitter output. 


tions with mode A. Because it is supplied at the master 
laser repetition rate, we observe a sufficiently clear cor¬ 
relation signal to retrieve cp at any moment in time. It 
is the availability of this phase evaluation technique that 
has motivated us to choose the catalysis scheme in favor 
of the more common scissors scheme for the NLA. 

To mitigate the degradation of this reference signal 
by the loss channel, we implement that channel using 
an electro-optical modulator (EOM) followed by a half¬ 
wave plate. The EOM is controlled by a square wave 
of a 0.2 s period (during which the phase is assumed to 
vary linearly) and a duty cycle of 0.35. The “off’ period, 
when the transmission through the EOM is maximized, 
is used to measure <fi. During the “on” period, the EOM 
voltage is set to attenuate the propagating signal, and 
the quadrature samples associated with the distilled EPR 
state are acquired. 


0.86 ± 0.01 and {{X A + X B ) 2 ) = 1.20 =b 0.01, measured 
in units of the vacuum state level [Fig. IS2l a])]. This cor¬ 
responds to the squeezing parameter of 7 = 0.18 ± 0.04. 

Prior to distillation, we degrade the initial state’s en¬ 
tanglement by two alternative methods. First, we turn 
the polarization of the pump beam by 6 = (76 d= 2) °, re¬ 
sulting in the reduction of the squeezing parameter 7 by 
a factor of cos# = 0.22 ± 0.02. This reduces the EPR 
correlations, bringing the difference and sum quadrature 
noise levels to 0.966 and 1.044, respectively. The second 
method consists of introducing asymmetric attenuation 
imitating propagation of mode 2 through a lossy optical 
channel with an intensity transmissivity of r 2 = 0.05. 
Then the difference and sum quadrature noise levels be¬ 
come 0.993 and 1.010, respectively. Such low squeezing 
levels could not be reliably measured by homodyne de¬ 
tection, so the variance values quoted above are based 
on the measured initial squeezing and the known atten¬ 
uation factor. 

The single photon state required for the NLA is ob¬ 
tained from parametric down-conversion in another crys¬ 
tal, PPKTP2, at a rate of 50-100kHz, heralded by the 
clicks of a single-photon counting module (SPCMi) [20j . 
The variable beam splitter that enacts the NLA is imple¬ 
mented by a combination of two polarizing beam split¬ 
ters and a half-wave plate between them. One output of 
that beam splitter is directed onto another photon de¬ 
tector (SPCM2) while the other one is subjected to ho¬ 
modyne detection. The distillation events correspond to 
both SPCMs firing synchronously, and occur at a rate of 
- 10 - 100Hz. 

To characterize the distilled state, the quadrature data 
from both detectors should be accompanied by knowl¬ 
edge of the sum cp of the local oscillator phases for each 
data sample [8]. We acquire this information by utilizing 
the fraction of mode B of the original EPR state that 
is reflected from the NLA beam splitter towards the ho¬ 
modyne detector in the absence of the heralding event. 
This field exhibits phase-dependent quadrature correla- 


IV. RESULTS. 

Our experimental results are summarized in Fig. IS2l 
Part (a) shows samples of the raw data for the original 
and distilled states while the left and right columns in (b) 
and (c) correspond to the distilled states after applying 
the two methods of degrading the entanglement. 

Panel (b) shows the variances of the sum and difference 
of the position quadratures (the behavior of the momen¬ 
tum quadrature is similar to that of the position). The 
amount of recovered squeezing is maximized at g =6-7 
for the first method and g =10-12 for the second, which 
is consistent with the theoretical expectation in the ideal 
case g = [yr( 1 + \/2)] -1 - In both cases, the two-mode 
squeezing of the state recovered by distillation is at the 
same level as the initial state, and dramatically higher 
than that of the EPR state with reduced squeezing, or 
the attenuated EPR state before distillation. 

To quantitatively estimate the degree of entanglement 
at different stages of our experiment, we use the Duan et 
al. inseparability parameter [l(], defined as 

r . ((. X A -aX' B f) + {{P A +aP' B f ) ^ 

1 = mm----^--. (4) 

a 1 + a 2 w 

For all our data sets, we found the optimal value of a to 
be close to unity, resulting in the plot shown in Fig. lS2f c). 
The value of this parameter in the distilled state is a fac¬ 
tor of about five greater than that in the degraded EPR 
states. To our knowledge, this factor of entanglement in¬ 
crease achieved in a distillation protocol is higher than 
anything reported to date, not only in the continuous-, 
but also in the discrete-variable domain [7, 8, [22]. 

For distillation after asymmetric loss, we can also 
compare this parameter with that of the perfect EPR 
state that has experienced the same loss, in which case 
/ = (1 — t 2 )/(1 + t 2 ) = 0.905 [l8|. The entanglement ob¬ 
served in the distilled state is consistently stronger than 
this benchmark, demonstrating that our method is able 
to overcome the deterministic bound. 
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FIG. 2 : Experimental results, a) 10,000 samples of raw position quadrature data for the original two-mode squeezed (top) 
and the distilled state after applying the two methods of degrading the entanglement [reducing the initial squeezing (center), 
asymmetric loss (bottom)]. The NLA gain is 6.5 for the center plot and 10 for the bottom. The degree of correlation is 
similar in all three cases. The quadratures exhibit nonclassical correlations at a level below the shot noise (dashed circle), b), 
c) Analysis of the distilled states as a function of the NLA gain. The left column in (b) and (c) corresponds to the case of 
reduced initial squeezing, the right column to the asymmetric loss, b) Two-mode squeezing measured by the variances of the 
sum (antisqueezing) and difference (squeezing) of the position quadratures in the two channels of the distilled EPR state, c) 
Inseparability parameter of Duan et al. lj. The vertical axes in both (b) and (c) are scaled in units of standard quantum 
limit. The theoretical curves for the case of low initial squeezing are calculated assuming the initial squeezing parameter of 
7 = 0.05, detection efficiency in the undistilled and distilled channels respectively t]a = 0.5 and t]b = 0.5, and the single-photon 
preparation efficiency 77 = 0.65 [3, [H, [2j|. For the case of a loss channel, 7 = 0.135 and tja = 0.45 are used; other parameters 
are the same pl|. 


It is instructive to estimate our distillation procedure 
by finding a hypothetical “equivalent” EPR state that, 
after appropriate attenuation of both channels, would ex¬ 
hibit the same quadrature statistics as our distilled state 
[3 El. We found the squeezing parameter of that state 
and the equivalent efficiency of the loss channel in mode 
B to be, respectively, about two and three times greater 
than those in the actual experiment. This illustrates the 
capability of our procedure to largely compensate for the 
losses and low initial squeezing jl8j |. 


V. DISCUSSION AND OUTLOOK. 

The CV entanglement distillation procedure demon¬ 
strated here allows us to compensate for the low initial 
squeezing and losses in the transmission channel, how¬ 
ever significant these detrimental factors may be. For 
the first time, we have broken the deterministic bound 
for the distribution of CV entanglement. These proper¬ 
ties make our method promising for the construction of 
a CV quantum error correction protocol [23[ and hence 
ultimately a CV quantum repeater. 

However, our results also demonstrate the limitations 


in the amount of entanglement that can be recovered. 
There are two reasons giving rise to these limitations. 
First, the single-channel linear-optical scheme imple¬ 
mented here constitutes a good approximation to NLA 
only for output states with mean photon numbers much 
less than one, thereby imposing a fundamental limit on 
the amount of squeezing and entanglement attainable 
through the distillation. Second, we are not approach¬ 
ing even that limit because of imperfect preparation of 
the EPR and the ancilla photon, mode matching on the 
NLA beam splitter and detection inefficiencies. 

The first of the above issues can be resolved by switch¬ 
ing to multichannel NLA as envisioned in the original 
proposal ®. Addressing the second point — improving 
the experimental efficiencies — is possible by a number 
of techniques. In particular, switching from the pulsed 
to continuous-wave domain would allow eliminating the 
intrinsic efficiency issues associated with pulsed squeez¬ 
ing mm and enable significant preparation and de¬ 
tection efficiency improvements J26j. However, before 
these measures are to be undertaken, it is important to 
theoretically understand the requirements for a distilla¬ 
tion device that would enable construction of a practical 
continuous-variable quantum repeater — as was done for 






























the discrete-variable case [27|. This understanding will improved in order to qualify for practical applications, 
clarify if and how the method presented here must be 
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A. Duan’s inseparability for the perfect EPR state 

Suppose a two-mode state prepared in modes A and 
B is subjected to one-sided loss in mode B. This loss 
results in quadrature transformation 

X' B = tXb + y/l - T 2 X y ; 

P' B = tPb + y/l - T 2 Pv , 

where r is the amplitude transmissivity of the loss chan¬ 
nel and Xy is the position quadrature of the vacuum 
state with variance (Xy) = 1 / 2 . We define the Duan et 
al. inseparability parameter [ 1 ] as 

r • {{X A -aX' B f) + {{P A +aP' B ) 2 ) ^ 

1 = mm----£--. ( 1 ) 

a 1 + a z 

The perfect EPR state has Xa — Xb = 0 and Pa + Pb = 
0, but each quadrature taken individually has infinite 
variance. Because of the latter fact, the only value of a 
for which I takes a finite value is a = 1/r. Then for the 
position quadratures we have 


((X A - aX' B f) = ( |x A - X B - ATX Xv 

_ 1 1 - T 2 

“ 2 r 2 

The same value obtains for the momentum term: 
(( Pa + aP B ) 2 ) = Accordingly, we have I = 

For our experiment, r 2 = 0.95 and hence I = 0.905. 



B. Theoretical description 

a. Ideal case We begin by considering the idealized 
case described by Eq. (3) in the main text. The variances 
of the individual position or momentum quadratures in 
that state are 

(X 2 > = (X 2 ) = (Pi) = (P 2 b) (2) 

r 2 + 3 ( 7 t ) 2 
2 [r 2 + (yr) 2 ] 

while their correlation equals 

~(X A X B ) = ( P A P B ) (3) 

ryr 

r 2 + (qr ) 2 ‘ 

The variance of the quadrature sum and difference is 
therefore 


/3 2 + 3 ± 2/3 
/3 2 + 1 



FIG. SI: The model for a complete theoretical analysis. Grey 
rectangles indicate attenuators, quantities next to them show 
intensity transmissivities of these attenuators. 


where p = ^ = g = ± being the NLA gain. The 
position difference (momentum sum) variance is mini¬ 
mized for p = 1 + y/2, at which point it takes the value 
((X A - X B ) 2 ) = ((. P A + P B ?) = 2-y/2. 

b. Treatment at the single-photon level Let us now 
develop a more complete theory, taking into account the 
efficiency 77 of the ancilla photon as well as the efficiencies 
tja and tjb of the detectors in both channels, according to 
Fig. SI. Our goal is to calculate the covariance matrix of 
the distilled state. We continue to work in the subspace 
of the Hilbert space spanned by states |0), |1) and assume 
the perfect efficiency of the heralding SPCM. Both these 
assumptions are well-justified for 7 , r 1 and r ~ qr. 
The inefficient ancilla photon source generates the mix¬ 
ture of the single-photon state with probability 7 and the 
vacuum with probability 1 — 7 . In the former case, the 
distilled EPR state is r |00) — qr 111), while in the latter 
case, the click of the heralding detector will occur only if 
the photon from the EPR state propagates through the 
beam splitter towards the SPCM, resulting in the unnor¬ 
malized state qr 110) in the distilled output. Taking into 
account both possibilities, we obtain the following output 
state 


p' = q(r |00) — qr |ll))(r (00| — qr (11|) (4) 

+ (1 — v)(t t ) 2 110 ) (io|, 


where we have not yet taken into account the homodyne 
detector efficiencies tja and tjb- 

In the second term of the above equation we have 


( x a) = (Pa) = | 
(X 2 ) = ( P i) = I; 
(X A X B ) = ( P A P B ) = 0 . 


From these results, as well as from Eqs. m and ([3]) , we 


((X^±X B ) 2 ) =((P^TP B ) 2 ) 
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FIG. S 2 : Comparison between the prediction of the full theory 
(thin solid blue curves) and that at the single-photon level 
(thick dashed purple curves), a) Same parameters as used in 
the experimental fit: r 2 = 0.05,7 — 0.135, t]a = 0.45, t]b — 
0.5, rj — 0.65. b) Same parameters as in (a) except r 2 = 
0.0005, 7 = 0.0135. In (b), a much lower multiphoton fraction 
results in a better match between the two theories. 


find the covariance matrix elements of state 

y 2 \ _/ p 2 \ ??(/ 3 2 + 3 ) + 3(1 - rj) _ 

Alp' \ A/p 2(1 + ri(3 2 ) 

_ / p 2 \ ??(/ 3 2 + 3 ) + (1 - 7 ?) 

p' K B> p' 2(1 + r](3 2 ) 

- (X A X B )„ = (P A P B )„ = 

Accounting for the detector efficiencies affects these re¬ 
sults as follows: 

<V 2 ) out = 7M<X 2 ). / + l(l-rM); 

( x B)out = ^(v 2 >., + !( i-m)\ (5) 

{X A X B ) out = v^M vE(X A X B ).,. 

The covariance matrix elements related to the momen¬ 
tum are transformed in a similar fashion. 

c. Full theory In addition to the above analytical 
calculation, we performed a numerical modeling of our 
experiment using the density matrix in the Fock basis, in 
the subspace spanned by the zero- to three-photon Fock 
states. Figure S 2 shows the variances ((Xa ± Xb) 2 ) pre¬ 
dicted by the two techniques. As expected, the predic¬ 
tions are very similar as long as conditions 7 ,r 1 and 

r ~ 77 - hold. The single-photon approximation breaks 


a) 



Gain 



FIG. S3: The effective equivalent parameters of the distilled 
EPR state: channel efficiency (a) and squeezing parameter 
(b), as explained in the text. 


down for low amplifications because for macroscopic NLA 
beam splitter reflectivities r < 1 we obtain a significant 
likelihood of Hong-Ou-Mandel type events when both the 
ancilla photon and the photon from the EPR state exit 
the beam splitter through the same port. 

We used this numerical model to calculate the theo¬ 
retical fit to the data shown in Fig. 2 of the main text. 
Note that our model does not take into account a pos¬ 
sible mode mismatch between the to-be amplified EPR 
state mode and the ancilla photon. This is a possible ex¬ 
planation for the discrepancy between the measured and 
best-fit values for the initial squeezing (7 = 0.18 ± 0.04 
and 7 = 0.135, respectively). 


C. Calculating the equivalent EPR state 


The variances of the sum and difference of the position 
quadratures of a pure EPR state with squeezing param¬ 
eter 7 eq are e ±27eQ , respectively If this state expe¬ 
riences two-sided loss by propagating through channels 
with efficiencies r]A,eq and r]B, e q , covariance matrix of the 
output can be calculated from Eq. (j5j): 

( X ^)eg = ( P A-)eq = \ ^eq COSh 2 le q + (1 “ VA,eq)]] 
{Xb) eq = ( P b) eq = 2 \ r l B ^eq c °sh 27eg + (1 ~ r)B,eq)]', 
— (. XaXb) eq = (PaPb) eq = —^/VA,eqVB,eq SUlh 2^^. 

















8 


Accordingly, the variances of the sum and difference of 
the position quadratures become 

((X A ±X B f) n = 1 + ’M.«. +’"»■«, (€0^27.,-!) 

~F *\/VA,eqVB,eq sinh 2y e q,. (6) 

Knowing the experimentally measured quantities 
(( Xa ±Xb) 2 ) for the distilled state, one can solve the 
above equation to find the parameters of the equivalent 
state that would exhibit similar quadrature statistics. 
In the calculations shown in Fig. IS3l we assumed the 


efficiency r]A,eq of the equivalent state to equal the 
actual efficiency t\a of the undistilled channel obtained 
from the fit to the experimental data, and calculated 
7 eq and r]B,eq- In this way, the quantity r]B,eq describes 
the equivalent channel efficiency, thereby serving as a 
benchmark of our distillation protocol. 

The high uncertainty bars in Fig.[S3]are due to the rel¬ 
atively low degree of squeezing obtained after the distil¬ 
lation. Small variations of quadrature variance measure¬ 
ments have significant effect on the solutions of Eq. (|6j) . 
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